# zizmor configuration
# https://docs.zizmor.sh/configuration/

rules:
  dependabot-cooldown: { disable: true } # Useless unless unpinned-uses is enabled.
  ref-confusion: { disable: true } # TODO: Old GHA didn't work without this pattern in some cases, but does it seem to be fixed?
  secrets-inherit: { disable: true }
  unpinned-uses:
    config:
      policies:
        taiki-e/*: any
        '*': ref-pin
  obfuscation:
    ignore:
      # We use `shell: cmd` to test compatibility
      - ci.yml